makefu/1systems/pnp.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{ config, pkgs, ... }:

{
  imports =
    [ # Include the results of the hardware scan.
      # Base
      ../2configs/base.nix
      ../2configs/tinc-basic-retiolum.nix

      # HW/FS
      <nixpkgs/nixos/modules/profiles/qemu-guest.nix>
      ../2configs/fs/vm-single-partition.nix

      # Services
      ../2configs/git/cgit-retiolum.nix

      ## Reaktor
      ## \/ are only plugins, must enable Reaktor explicitly
      ../2configs/Reaktor/stockholmLentil.nix
      ../2configs/Reaktor/simpleExtend.nix

      ../2configs/exim-retiolum.nix
      ../2configs/urlwatch.nix

      # ../2configs/graphite-standalone.nix
    ];
  krebs.Reaktor.enable = true;

  krebs.build.host = config.krebs.hosts.pnp;
  krebs.build.user = config.krebs.users.makefu;
  krebs.build.target = "root@pnp";

  nixpkgs.config.packageOverrides = pkgs: { tinc = pkgs.tinc_pre; };

  krebs.build.deps = {
    nixpkgs = {
      url = https://github.com/NixOS/nixpkgs;
      rev = "03921972268934d900cc32dad253ff383926771c";
    };
  };

  networking.firewall.allowedTCPPorts = [
  # nginx runs on 80
  80
  # graphite-web runs on 8080, carbon cache runs on 2003 tcp and udp
  # 8080 2003

  # smtp
  25
  ];

  # networking.firewall.allowedUDPPorts = [ 2003 ];

}